Merge pull request #5 from foundersandcoders/feature/ap-13-resend-email-integration

feat: add Resend email integration for magic links (AP-13)

Author: AlexVOiceover

.env.example

@@ -1,6 +1,7 @@
 AIRTABLE_API_KEY=
 AIRTABLE_BASE_ID=
 RESEND_API_KEY=
+RESEND_FROM_EMAIL=
 DISCORD_WEBHOOK_URL=
 MAGIC_LINK_SECRET=
 SESSION_SECRET=

package-lock.json

@@ -43,6 +43,7 @@
 	},
 	"dependencies": {
 		"airtable": "^0.12.2",
-		"jsonwebtoken": "^9.0.3"
+		"jsonwebtoken": "^9.0.3",
+		"resend": "^6.6.0"
 	}
 }

package.json

@@ -0,0 +1,67 @@
+import { Resend } from 'resend';
+import { RESEND_API_KEY, RESEND_FROM_EMAIL } from '$env/static/private';
+
+const resend = new Resend(RESEND_API_KEY);
+
+interface SendMagicLinkResult {
+	success: boolean;
+	error?: string;
+}
+
+export async function sendMagicLinkEmail(
+	to: string,
+	magicLinkUrl: string,
+	type: 'staff' | 'student',
+): Promise<SendMagicLinkResult> {
+	const subject = type === 'staff'
+		? 'Staff Login - Apprentice Pulse'
+		: 'Student Login - Apprentice Pulse';
+
+	const html = `
+		<div style="font-family: sans-serif; max-width: 600px; margin: 0 auto;">
+			<h1 style="color: #333;">Apprentice Pulse</h1>
+			<p>Click the button below to log in:</p>
+			<a href="${magicLinkUrl}" style="display: inline-block; background: #0066cc; color: white; padding: 12px 24px; text-decoration: none; border-radius: 4px; margin: 16px 0;">
+				Log in
+			</a>
+			<p style="color: #666; font-size: 14px;">
+				This link expires in 15 minutes.<br>
+				If you didn't request this, you can safely ignore this email.
+			</p>
+			<p style="color: #999; font-size: 12px;">
+				Or copy this link: ${magicLinkUrl}
+			</p>
+		</div>
+	`;
+
+	const text = `
+Apprentice Pulse
+
+Click this link to log in:
+${magicLinkUrl}
+
+This link expires in 15 minutes.
+If you didn't request this, you can safely ignore this email.
+	`.trim();
+
+	try {
+		const { error } = await resend.emails.send({
+			from: RESEND_FROM_EMAIL,
+			to,
+			subject,
+			html,
+			text,
+		});
+
+		if (error) {
+			console.error('Resend error:', error);
+			return { success: false, error: error.message };
+		}
+
+		return { success: true };
+	}
+	catch (err) {
+		console.error('Email send error:', err);
+		return { success: false, error: 'Failed to send email' };
+	}
+}

src/lib/server/email.ts

@@ -2,6 +2,7 @@ import { json } from '@sveltejs/kit';
 import type { RequestHandler } from './$types';
 import { findStaffByEmail } from '$lib/airtable/sveltekit-wrapper';
 import { generateMagicToken } from '$lib/server/auth';
+import { sendMagicLinkEmail } from '$lib/server/email';
 
 export const POST: RequestHandler = async ({ request, url }) => {
 	const { email } = await request.json();
@@ -22,9 +23,11 @@ export const POST: RequestHandler = async ({ request, url }) => {
 	const verifyUrl = new URL('/api/auth/verify', url.origin);
 	verifyUrl.searchParams.set('token', token);
 
-	// TODO: Send email with magic link (AP-13)
-	// For now, log token for testing
-	console.log(`[Staff] Magic link: ${verifyUrl.pathname}${verifyUrl.search}`);
+	const result = await sendMagicLinkEmail(email, verifyUrl.toString(), 'staff');
+
+	if (!result.success) {
+		return json({ error: 'Failed to send email. Please try again.' }, { status: 500 });
+	}
 
 	return json({ message: 'Magic link sent! Check your email.' });
 };

src/routes/api/auth/staff/login/+server.ts

@@ -10,6 +10,10 @@ vi.mock('$lib/server/auth', () => ({
 	generateMagicToken: vi.fn(() => 'mock-token'),
 }));
 
+vi.mock('$lib/server/email', () => ({
+	sendMagicLinkEmail: vi.fn(() => Promise.resolve({ success: true })),
+}));
+
 import { findStaffByEmail } from '$lib/airtable/sveltekit-wrapper';
 import { generateMagicToken } from '$lib/server/auth';
 

src/routes/api/auth/staff/login/server.spec.ts

@@ -2,6 +2,7 @@ import { json } from '@sveltejs/kit';
 import type { RequestHandler } from './$types';
 import { findApprenticeByEmail } from '$lib/airtable/sveltekit-wrapper';
 import { generateMagicToken } from '$lib/server/auth';
+import { sendMagicLinkEmail } from '$lib/server/email';
 
 export const POST: RequestHandler = async ({ request, url }) => {
 	const { email } = await request.json();
@@ -22,9 +23,11 @@ export const POST: RequestHandler = async ({ request, url }) => {
 	const verifyUrl = new URL('/api/auth/verify', url.origin);
 	verifyUrl.searchParams.set('token', token);
 
-	// TODO: Send email with magic link (AP-13)
-	// For now, log token for testing
-	console.log(`[Student] Magic link: ${verifyUrl.pathname}${verifyUrl.search}`);
+	const result = await sendMagicLinkEmail(email, verifyUrl.toString(), 'student');
+
+	if (!result.success) {
+		return json({ error: 'Failed to send email. Please try again.' }, { status: 500 });
+	}
 
 	return json({ message: 'Magic link sent! Check your email.' });
 };

src/routes/api/auth/student/login/+server.ts

@@ -10,6 +10,10 @@ vi.mock('$lib/server/auth', () => ({
 	generateMagicToken: vi.fn(() => 'mock-token'),
 }));
 
+vi.mock('$lib/server/email', () => ({
+	sendMagicLinkEmail: vi.fn(() => Promise.resolve({ success: true })),
+}));
+
 import { findApprenticeByEmail } from '$lib/airtable/sveltekit-wrapper';
 import { generateMagicToken } from '$lib/server/auth';